Description
A Incorrect Execution-Assigned Permissions vulnerability in the permissions package of SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Tumbleweed sets the permissions for some of the directories of the pcp package to unintended settings. This issue affects: SUSE Linux Enterprise Server 12-SP4 permissions versions prior to 20170707-3.24.1. SUSE Linux Enterprise Server 15-LTSS permissions versions prior to 20180125-3.27.1. SUSE Linux Enterprise Server for SAP 15 permissions versions prior to 20180125-3.27.1. openSUSE Leap 15.1 permissions versions prior to 20181116-lp151.4.24.1. openSUSE Tumbleweed permissions versions prior to 20200624.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SUSE | SUSE Linux Enterprise Server 12-SP4 | permissions – < 20170707-3.24.1 | 20170707-3.24.1 |
| SUSE | SUSE Linux Enterprise Server 15-LTSS | permissions – < 20180125-3.27.1 | 20180125-3.27.1 |
| SUSE | SUSE Linux Enterprise Server for SAP 15 | permissions – < 20180125-3.27.1 | 20180125-3.27.1 |
| openSUSE | openSUSE Leap 15.1 | permissions – < 20181116-lp151.4.24.1 | 20181116-lp151.4.24.1 |
| openSUSE | openSUSE Tumbleweed | permissions – < 20200624 | 20200624 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP2 | permissions | 20181224-23.3.1 | SUSE-SU-2021:0197-1 |
| SLES 15 | pcp | 3.11.9-5.11.5 | SUSE-SU-2021:1292-1 |
| SLES 12 SP5 | pcp | 3.11.9-6.17.1 | SUSE-SU-2022:1873-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 15 | pcp | 3.11.9-5.11.5 | SUSE-SU-2021:1292-1 |
| SLE HPC 15 | pcp | 3.11.9-5.11.5 | SUSE-SU-2021:1292-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.4 | pcp | 3.11.9-150000.5.14.1 | SUSE-SU-2022:1509-1 |
| openSUSE Leap 15.3 | pcp | 3.11.9-150000.5.14.1 | SUSE-SU-2022:1509-1 |
Advisories 4
- SUSE-SU-2021:1292-1 Security update for pcp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1873-1 Security update for pcp SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:0197-1 Security update for permissions SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2022:1509-1 Security update for pcp SUSE / openSUSE Security Updates · Feb 4, 2026